Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: BKji8KthVlWJFKg3bNGCTmpFk6enShytRFym8M6l9yo=
Subject key identifier: 4D:F9:51:D6:08:11:95:B9:9B:2A:CF:B1:E2:76:15:11:36:FB:2B:CB
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 019A4EF5AC15DF76828C59832E799D5EF717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: N5wu6z2DPRXnDKJVt7Aob/VLEborNYoNubc/ke++0GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:15:df:76:82:8c:59:83:2e:79:9d:5e:f7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=4df951d6081195b99b2acfb1e276151136fb2bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:1f:20:14:ab:9f:af:ac:22:f4:7c:0a:a5:
1b:f4:32:01:bc:1a:3d:17:e6:b7:80:0b:e3:04:2f:
78:50:67:d8:ef:d6:28:b5:a2:d5:36:65:76:6f:e0:
dd:10:b8:c4:32:7f:60:5b:41:f5:2e:a3:12:3c:d2:
1b:93:1f:8a:b0:55:47:78:f6:76:05:7c:13:47:cc:
9e:4b:4c:8c:1c:87:54:cf:e3:6b:ad:2a:45:46:ef:
04:5f:ec:d1:49:7f:c5:46:1d:cd:25:7b:fc:1d:90:
85:f1:83:55:3a:49:97:f9:1d:e4:4f:bf:49:2d:23:
b1:97:11:e1:d4:89:da:00:de:90:4a:e2:6c:60:9b:
99:17:4d:f7:d5:8d:ad:37:5f:d4:8e:9d:c1:b7:2d:
f4:7c:b2:19:93:cc:b7:5e:73:39:f8:5f:63:76:74:
28:d4:21:58:8d:1e:92:55:d6:96:40:37:66:35:73:
2f:6a:95:c1:ec:87:06:2a:58:4f:f9:96:ad:fa:5e:
86:17:64:6e:75:74:27:e1:cf:60:5b:cf:19:fe:7e:
47:b8:61:dc:38:65:ec:8c:44:9c:e7:a5:0c:2d:dd:
3f:92:5f:20:e8:70:80:ed:21:3a:79:df:9e:5c:09:
37:fb:8e:af:ef:9e:dd:4c:c6:98:55:af:3c:c3:48:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:51:D6:08:11:95:B9:9B:2A:CF:B1:E2:76:15:11:36:FB:2B:CB
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:64:a4:55:dd:1c:28:6e:1e:23:72:24:6d:78:4b:b0:2e:
ce:1a:d8:90:29:16:4d:9d:8c:6a:bb:e3:71:b3:f7:82:d8:d4:
18:f2:c7:5f:b5:86:bc:2d:a8:a4:9e:ca:d2:07:9c:58:53:23:
9d:fe:61:48:70:80:1f:3f:41:dc:54:bb:89:ee:4c:3b:83:3c:
58:74:f2:41:2a:25:cc:70:c8:9c:07:a7:65:c8:88:a4:be:95:
82:37:fb:65:9e:14:c7:73:af:3c:12:40:db:3c:f6:2e:51:4a:
08:b7:ef:ac:af:4e:a5:98:b8:64:2b:0f:f4:2b:dd:b7:55:de:
32:d2:a2:1f:68:d2:ec:e9:07:19:0d:db:51:0e:f0:11:1e:1f:
ea:b4:1f:c8:f3:9d:34:13:f8:e7:1b:b7:fb:9f:25:cc:65:fa:
f9:f3:78:80:c8:33:23:46:59:da:9d:d4:4f:ba:e2:13:88:51:
29:47:6e:2e:4f:e1:75:50:a6:de:53:e9:4e:80:1a:bb:9e:da:
01:60:c9:06:62:4f:42:b7:9e:51:fc:d3:c2:96:4b:c0:af:11:
cf:4e:9a:df:bd:3f:df:9b:bd:27:7e:4c:32:ff:8f:2a:a4:9e:
10:50:f7:07:31:34:71:46:17:db:70:04:7b:8f:f9:58:31:25:
18:af:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:58 2025 by rpki-client